Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/qDbA-b9sN6CcxteRvf23TTfu-8I.roa
File: qDbA-b9sN6CcxteRvf23TTfu-8I.roa (raw, json)
Hash identifier: Ec/PB9+MZBxUusm4sStYZgOOQ2OV6dyYp2tuYyowm3M=
Subject key identifier: A8:36:C0:F9:BF:6C:37:A0:9C:C6:D7:91:BD:FD:B7:4D:37:EE:FB:C2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 104C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qDbA-b9sN6CcxteRvf23TTfu-8I.roa
Signing time: Wed 01 Feb 2023 10:28:23 +0000
ROA not before: Wed 01 Feb 2023 10:28:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 115.30.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A836C0F9BF6C37A09CC6D791BDFDB74D37EEFBC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:88:c8:0c:c7:bb:c7:51:22:11:e1:df:62:5f:
df:3e:fb:04:2c:6f:72:aa:7a:86:c0:1f:30:49:ca:
c5:a2:64:1c:a9:6f:7d:b3:da:42:1f:ee:4f:c5:53:
de:17:1f:2a:da:46:17:e3:60:3f:83:4b:ac:70:9c:
c6:95:e0:aa:e6:79:3f:7f:84:a2:99:cc:6a:c1:e7:
13:52:40:b4:a7:a9:90:c2:73:84:39:9e:cb:36:76:
52:ce:c8:86:4a:b3:ff:80:28:46:10:05:fa:b2:47:
b4:df:5c:19:62:a9:2a:7b:dc:07:3f:97:a5:d6:48:
74:3c:45:b4:5c:80:c8:e8:86:12:dd:0d:40:61:bb:
fb:c7:5c:aa:1e:08:54:8a:04:d7:71:a3:b4:06:93:
65:e4:ea:24:f9:5a:7c:48:26:f7:87:ed:ad:d0:4e:
f7:9b:3b:b8:ad:f6:70:30:8e:7c:1d:6f:de:b7:35:
bf:ec:87:b7:55:aa:90:3e:5d:62:c5:5b:a1:b2:ab:
40:15:40:84:c9:b6:8d:51:a7:54:3b:70:36:26:5a:
5e:1b:86:ee:a7:d1:f6:13:b5:6b:b4:0b:62:fc:a4:
ec:a5:56:ec:8c:7b:dd:5a:49:50:b2:5f:4b:b6:6f:
4a:a2:a4:ca:ed:97:bf:f5:1e:2d:48:17:a7:7d:5c:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:36:C0:F9:BF:6C:37:A0:9C:C6:D7:91:BD:FD:B7:4D:37:EE:FB:C2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qDbA-b9sN6CcxteRvf23TTfu-8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/18
Signature Algorithm: sha256WithRSAEncryption
39:ac:68:cf:98:1b:4e:63:5e:3c:df:c7:ae:82:40:2f:ff:42:
b9:b9:bc:ef:5a:96:f1:bf:4d:38:fa:b8:92:1e:0b:18:4e:78:
4b:ff:54:24:0d:f5:03:0f:ca:cc:96:f1:b8:65:1a:de:ee:09:
b7:d3:02:67:84:fd:35:5b:8f:f1:cf:58:c4:5a:a4:05:3f:65:
3f:d9:cb:a9:0e:00:aa:a1:a0:80:c9:c0:e6:ec:cf:6b:b0:13:
26:35:7d:40:92:61:ed:40:5b:ec:82:ce:e9:44:0e:98:d9:89:
8f:a0:26:c0:d1:46:78:d2:47:d5:b2:d9:7a:66:89:94:eb:1d:
e7:ec:29:27:7a:e2:df:b6:31:e0:51:48:45:78:0b:a9:d9:7e:
e1:35:08:d9:8f:aa:cc:56:b1:56:0e:02:c1:a5:a6:af:4c:dc:
15:a8:9e:58:2a:a3:66:5a:97:a0:a6:f1:87:2e:25:d7:17:b7:
d2:55:50:a4:6f:f6:b3:67:7d:2d:72:de:e2:c0:40:46:64:89:
1b:dd:5d:c1:e2:38:9c:30:16:31:fe:7a:b8:ca:80:45:05:df:
33:96:9b:69:42:6a:6d:5c:77:1e:2e:66:5e:0c:1b:f4:dd:99:
f6:21:a0:bf:ef:33:3e:3f:e2:ff:7a:8f:b9:02:46:9c:d3:dd:
d8:53:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org